Which of the Following Is Not a Strategy for Mitigating

Multiple Choice

Which of the following is not a strategy for mitigating the risk of threats against information?

A) Continue operating with no controls and absorb any damages that occur
B) Transfer the risk by purchasing insurance.
C) Implement controls that minimize the impact of the threat
D) Install controls that block the risk.
E) All of the above are strategies for mitigating risk.